You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

~~~~Start the computer in Safe Mode :-When the machine first starts again, tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. -Select the option for Safe Mode using the arrow keys.-Press Enter to boot into Safe Mode.

~~~~Open SmitfraudFix Double-click smitfraudfix.cmd Select Option 2 - Clean by typing 2 and press Enter (Deletes infected files)You are prompted: Do you want to clean the registry? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.

The tool also checks if a relevant file, wininet.dll, is infected. You may be prompted to replace the infected file (if found).Replace infected file? Answer Y (yes) and hit Enter to restore a clean file.

Are you still getting the annoying System alert?The HijackThis log is not showing the malware.

Please open the SmitfraudFix folder and double-click smitfraudfix.cmdThis time select option #1 - Search by typing 1 and press EnterThis program scans large amounts of files on your computer, so please be patient while it works. When it is done, a log named rapport.txt is created, listing infected files (if present).

Please post C:\rapport.txt in your reply. Let’s see if there is anything left.

Please make sure all windows and browsers are closed before proceeding to run HijackThis. Access its Process Manager option as follows: -Click on Config-Click on Misc Tools -Click on Open Process Manager (This window lists all open processes running on the machine) -Click once on the process below to select it:

C:\WINDOWS\ALCMTR.exe

-Click: Kill Process to end the process

Exit HijackThis.

~~~~Reboot to Safe Mode :-Restart your computer. -When the machine first starts again, tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. -Select the option for Safe Mode using the arrow keys.-Press Enter to boot into Safe Mode.